After reading this paper I observed a little and I realized that an SNMP socket (exactly two: v4 and v6) exists when I use ls /proc/1/net. I see them clearly.
My question is simple, do the bootkits exist on Android? I suppose yes, if it is the case would you have documentation to recommend me at the security level? Especially the use of SNMP, is it normal? For example a use by the phone operator for material supervision? But this phone is a second hand with a different operator that does not make sense for my case.
Two days ago I asked a question here related to mediatek and strange files and files saturating the memory space. But I did not find an answer in relation to audio_dump folder in the paper of blackhat, but some matches that are cold in the back.